What’s Vulnerable › Products

Cisco ISE Passive Identity Connector vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Cisco ISE Passive Identity Connector version is affected

Latest Cisco ISE Passive Identity Connector vulnerabilities

• CVE-2026-20287 — Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities (CVSS 6.5)
• CVE-2026-20285 — Cisco Identity Services Engine Authorization Bypass Vulnerability (CVSS 4.3)
• CVE-2026-76423 — Cisco ISE API Authentication Bypass Vulnerability (CVSS 10.0)
• CVE-2026-20237 — Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities (CVSS 9.1)
• CVE-2026-20194 — Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities (CVSS 9.1)
• CVE-2026-20306 — Cisco Identity Services Engine Command Injection Vulnerability (CVSS 9.1)
• CVE-2026-20305 — Cisco Identity Services Engine Command Injection Vulnerability (CVSS 9.1)
• CVE-2025-20331 — Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy (CVSS 5.4)